
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier: zaqMp5isDatVGEYj1AYmIDTCatXFgVjPemZYU8VXUMI=
Subject key identifier: 9E:77:9C:29:4D:8B:8E:28:71:7B:6B:A5:26:B1:F8:90:F1:E8:0D:56
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial: 019DA34148A897B96715C712325CB3106019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number: 0F7D
Signing time: Sun 19 Apr 2026 01:00:57 +0000
Manifest this update: Sun 19 Apr 2026 01:00:57 +0000
Manifest next update: Mon 20 Apr 2026 01:00:57 +0000
Files and hashes: 1: YuHJmYFCnAz2SSKMxUmvTY991CE.roa (hash: TOD8ARSMl4ubAqj2aurWlfEhx3SyaroxCxGERNtBcZQ=)
2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: SyHGvq+dDK+PB/l6xSqX02p3/oJORNviIpry9AEDpNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:48:a8:97:b9:67:15:c7:12:32:5c:b3:10:60:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Validity
Not Before: Apr 19 01:00:57 2026 GMT
Not After : Apr 20 01:00:57 2026 GMT
Subject: CN=9e779c294d8b8e28717b6ba526b1f890f1e80d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:96:b4:f5:82:99:56:4c:b4:3d:5b:0d:83:
11:f2:d6:23:b5:a4:df:99:15:60:eb:0b:30:c6:21:
9e:06:25:9f:49:f0:fd:be:ca:34:58:ce:2a:f2:97:
05:cc:95:23:a6:8c:55:69:fa:3a:d0:6d:4f:ab:3f:
d4:ec:22:b3:33:88:d5:60:1c:e8:6c:0f:87:82:03:
59:55:f1:1d:e4:61:dc:42:58:17:03:04:b4:d7:b2:
2d:d3:90:5a:b9:81:9e:b0:92:b9:c8:48:92:ed:b0:
07:c3:ce:1b:0e:67:05:6d:98:04:49:15:af:0e:9b:
0b:e7:0c:23:ef:01:b6:c1:40:5a:7e:d7:78:cc:17:
71:25:03:ff:f7:ff:5c:d9:5d:cc:2e:1b:c8:d4:34:
8c:14:e4:70:86:ad:7a:d1:d8:91:66:34:62:15:dc:
de:53:f4:43:13:03:3d:49:bc:03:62:3d:d8:2c:c7:
0e:e8:6c:d2:07:26:5d:53:24:ad:bb:04:59:21:0f:
cc:08:e5:ad:d4:3e:93:4a:b0:4e:33:65:80:11:64:
07:ff:b0:87:ee:ee:b3:32:94:d7:1d:75:fd:09:cb:
87:d2:27:8e:11:a6:48:3b:4c:ed:0d:9b:56:6a:ad:
27:3f:71:db:4b:ae:8e:46:0c:08:64:89:ec:04:b6:
fe:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:77:9C:29:4D:8B:8E:28:71:7B:6B:A5:26:B1:F8:90:F1:E8:0D:56
X509v3 Authority Key Identifier:
keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f1:cb:f8:8f:3e:24:ec:03:d1:8c:79:ff:a9:af:b2:68:86:
dd:72:23:40:c5:7a:21:22:e0:a5:16:b8:18:29:5b:57:12:c5:
35:a1:8b:c0:36:4a:24:60:9d:37:41:a1:de:fb:cc:a5:bd:89:
72:1c:e3:ba:c1:e7:88:e1:cc:cb:8e:30:4d:3b:aa:b5:3f:9b:
fc:4c:c9:ce:56:c5:79:f4:b7:8a:d6:d3:d9:6e:46:13:fc:59:
25:cc:21:f7:b3:57:fa:8f:d1:bf:86:f1:31:8b:34:32:0b:7b:
fb:47:b9:08:76:c5:48:01:07:f4:f8:ee:65:44:18:76:1d:bb:
5a:16:9b:fb:e8:43:c4:a5:57:ee:aa:ac:7c:65:d4:2e:cd:23:
4c:68:33:cf:6e:17:b9:a8:56:d7:c4:e0:fa:41:b1:bf:2e:57:
0c:c2:3f:5e:df:08:d4:8f:99:c8:74:3c:76:74:5c:d7:a1:4b:
be:23:1b:91:e2:db:4b:25:89:cd:ed:4e:d7:cf:27:f4:2b:76:
fe:d6:f3:18:71:e6:cc:e7:0c:fe:6a:0d:43:e8:02:b1:42:a3:
50:c7:d4:47:da:2d:77:f8:d2:73:4a:32:d9:2f:d3:4f:5f:dd:
c9:b9:cb:68:8a:5f:df:ca:23:e0:26:93:a5:13:8e:c5:62:5c:
16:d2:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:34 2026 by rpki-client